Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153947.roa
File: AS153947.roa (raw, json)
Hash identifier: DyDelzEzeSUTWAh4a61o+r4uK09OwVEcVaau6R9xPWI=
Subject key identifier: 4C:6F:31:36:4F:4E:22:94:BF:7B:FD:C6:9B:A5:0D:92:03:F1:52:AD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1C9CFDA29738F72A05B33052056DDF15BBFBDB4D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153947.roa
Signing time: Wed 29 Jul 2026 02:24:45 +0000
ROA not before: Wed 29 Jul 2026 02:19:45 +0000
ROA not after: Wed 28 Jul 2027 02:24:45 +0000
asID: 153947
IP address blocks: 82.21.57.0/24 maxlen: 24
82.25.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:9c:fd:a2:97:38:f7:2a:05:b3:30:52:05:6d:df:15:bb:fb:db:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 29 02:19:45 2026 GMT
Not After : Jul 28 02:24:45 2027 GMT
Subject: CN=4C6F31364F4E2294BF7BFDC69BA50D9203F152AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:23:dd:08:58:07:45:b6:46:69:d9:0c:52:
26:ff:fe:45:70:36:6f:e8:f7:d9:b2:6f:2a:a6:f4:
56:7f:03:d4:bd:5b:ff:ab:16:de:b4:de:38:76:21:
59:b4:56:7b:b6:ab:14:c5:c0:c2:fa:4d:c5:c3:7e:
3b:96:c3:71:d6:a3:17:bf:b8:fc:4c:f4:21:f0:63:
1d:70:70:ef:ab:47:85:fb:cb:6a:80:d5:86:b7:1b:
5a:97:bd:b3:75:78:da:d5:9e:12:1c:bc:e2:14:20:
64:c2:40:1d:c5:8a:70:bc:a2:65:00:52:cd:2d:80:
3b:74:45:71:3f:fa:31:cf:ca:d9:7d:02:80:34:23:
77:a1:20:51:6b:4c:68:53:11:b7:9d:73:dd:c0:9f:
7b:f9:4b:a2:70:a5:69:56:ba:08:31:12:7d:2d:9b:
19:1b:39:8d:6c:4f:36:82:1d:68:8b:12:50:a0:e2:
43:41:d4:7b:4b:bd:69:68:fe:c0:3c:0d:13:c3:5e:
7d:a1:2e:1e:ce:75:07:99:53:0a:86:f1:61:37:33:
b6:67:5c:49:8b:cb:bf:15:4f:9d:c0:d9:5f:f2:64:
02:42:64:ee:bd:63:ad:17:ce:d8:ab:a8:31:55:74:
17:8d:2c:cf:83:74:c1:9c:15:ac:c8:eb:9e:eb:30:
2a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6F:31:36:4F:4E:22:94:BF:7B:FD:C6:9B:A5:0D:92:03:F1:52:AD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS153947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.57.0/24
82.25.47.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f0:03:a0:6b:80:b8:57:57:cc:d4:f7:dc:f8:13:40:ee:e6:
ca:3e:b5:1a:e3:46:64:34:39:24:6f:fe:73:cf:97:8b:f8:0b:
5a:e2:a3:fc:cb:f0:d7:09:2d:71:31:42:84:ca:5a:87:33:d7:
37:8e:af:d7:da:e0:9e:ae:b9:f3:19:43:31:8d:0f:12:9d:9a:
f8:94:76:90:a8:b7:74:b9:e2:d0:a5:90:f4:16:cf:04:1d:38:
aa:ac:c9:c5:ee:be:da:0f:66:cf:9d:2f:b6:26:6b:4c:c3:fd:
bc:2d:09:17:ca:a0:d0:69:67:c7:14:e2:06:8c:a7:75:c4:2a:
a6:22:b1:fd:65:27:f5:da:d8:05:a9:46:89:aa:b3:9b:8d:c1:
e7:5f:d4:44:fd:56:8f:fb:4b:f2:b6:b9:e3:bd:03:83:6f:1c:
a7:27:69:87:a1:3b:d6:e8:96:3c:e2:98:00:0c:1b:d6:51:8e:
68:da:bd:3d:cd:b6:78:79:b0:5f:5d:93:46:c2:0b:d4:63:3b:
3e:46:1b:f6:5f:62:f9:13:5d:d3:b4:74:4b:89:04:89:4d:66:
27:96:53:e9:14:53:6f:b8:a5:86:af:e6:3a:36:9c:80:91:07:
69:b7:66:38:14:76:03:9d:63:f0:42:7a:a7:84:be:b4:2b:61:
5c:63:1d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:47:55 2026 by rpki-client